insomnia
Known ransomware group ACTIVE Currently active
Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations — stealing patient files and threatening public exposure rather than encrypting files — and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.
1
Total Claims
1
Critical
—
Records Claimed
1
Industries Hit
Active span: Aug 24, 2026 – Aug 24, 2026 · 1 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Aug 2026 (1)Aug 2026
LessMore
Aug 2026Top Targeted Industries
Healthcare 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
1
Known leak sites